Firnkey

A lightweight, open-source password manager for your self-hosted server.

Firnkey is a small, fast password manager for your own self-hosted server. It works with any server that speaks the Bitwarden API. Your vault stays on the server you choose and is encrypted and decrypted only on your device. No Firnkey account, no tracking, no telemetry. WHAT IT DOES • Sign in to any server URL, including reverse-proxy subpaths; PBKDF2 and Argon2id. • Two-step login: authenticator app, email, YubiKey OTP, security keys (WebAuthn) and Duo. • Fill logins, cards and identities right in the page, with suggestions in the field. Several accounts on one site: the one you pick stays first and its password fills on the next step. • Offers to save cards and addresses you type into a form. • SSH keys: generate, add, edit, and fill the public key into "Add SSH key" forms. • Offers to save new logins and to update changed passwords. • Passkeys: create and use them on websites, stored in your vault. • One-time codes (TOTP) with automatic fill on the next page. • Password and passphrase generator. Its history remembers every password you copied or used, and on which website, encrypted and only in your browser. • Password history on every login, so an earlier password is never lost. • Live sync through your server's notifications hub, folders, favorites, Send, import and export. • Lock on a timer, when the computer locks, or keep unlocked until log out; Touch ID or PIN unlock. • Archive, clone, per-website match rules, equivalent domains and organization policies. • Password health: weak, reused and (optional) breached passwords. PRIVACY Firnkey talks only to your server, to Have I Been Pwned only if you turn on the breach check (just the first 5 characters of a password hash are sent), and to SimpleLogin or addy.io only when you create an email alias there. Website access is off until you turn on website integration. The source code is open under GPL-3.0: https://github.com/emreakca/firnkey Firnkey is an independent project, not affiliated with or endorsed by Bitwarden, Inc. Bitwarden is a trademark of Bitwarden, Inc.